Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
🔍A cutting edge context aware GraphQL API fuzzing tool!
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
:ghost: :flashlight: Invisible JS code execution & social engineering.
Attack tool for altering packed samples so that they evade static packing detection
- adversarial
- attack-defense
- evasion
- executable-packing